<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">Hi
all</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">I'm newbie
in freeradius, i've already installed freeradius-1.1.6, Mysql and MikroTik
NAS.</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">I'm
configuring my radius 1 session for every 1 user :</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">+----+---------------+---------------------------+-----+-------------+</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">| id |
UserName | Attribute | op | Value |</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">+----+---------------+---------------------------+-----+--------------+</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">| 57 |
rsa@idola | Simultaneous-Use | := | 0 |</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">| 42 |
rsa@idola | Password | == | denpasar |</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">+----+---------------+---------------------------+----+---------------+</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;"> </span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">The problem
is sometimes user cannot login even no session rsa@idola user in Mikrotik NAS
connected,</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">I check
with radwho, its shown below :</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">[root@ladps
~]# radwho</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">Login
Name What TTY When From
Location</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">tyl@idola tyl@idola
PPP S232 Mon 17:43 129.47.26 <a title="blocked::http://172.16.30.79/" href="http://172.16.30.79/">172.16.30.79</a></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">awn@idola
awn@idola PPP S245 Mon 19:53 129.47.26 <a title="blocked::http://172.16.30.246/" href="http://172.16.30.246/">172.16.30.246</a></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">gde@idola
gde@idola PPP S189 Mon 13:12 129.47.26 <a title="blocked::http://172.16.30.255/" href="http://172.16.30.255/">172.16.30.255</a></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">afy@idola
afy@idola PPP S218 Mon 13:20 129.47.26 <a title="blocked::http://172.16.30.252/" href="http://172.16.30.252/">172.16.30.252</a></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;"> </span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">no session
rsa@idola in that list… is'nt it ?</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">but
rsa@idola still couldnot login, this is the log from radiusd –X :</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;"> </span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">Ready to
process requests.</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">Nothing to
do. Sleeping until we see a request.</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rad_recv:
Access-Request packet from host <a title="blocked::http://129.47.26.123:1088/" href="http://129.47.26.123:1088/">129.47.26.123:1088</a>, id=8,
length=179</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
Service-Type = Framed-User</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
Framed-Protocol = PPP</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
NAS-Port = 252</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
NAS-Port-Type = Ethernet</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
User-Name = "rsa@idola"</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
Calling-Station-Id = "00:18:DE:69:F1:F3"</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
Called-Station-Id = "VLAN TEST"</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
NAS-Port-Id = "vlan_TEST"</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
MS-CHAP-Domain = "idola"</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
CHAP-Challenge = 0x0270131ced4933d4f26646e2946b2192</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
CHAP-Password = 0x016806e0edb33d434bc59078e233381b6c</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
NAS-Identifier = "ROUTER INDUK"</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
NAS-IP-Address = <a title="blocked::http://129.47.26.123/" href="http://129.47.26.123/">129.47.26.123</a></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
Mikrotik-Realm = "idola"</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
Processing the authorize section of radiusd.conf</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">modcall:
entering group authorize for request 1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
modcall[authorize]: module "preprocess" returns ok for request 1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;"> rlm_chap:
Setting 'Auth-Type := CHAP'</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
modcall[authorize]: module "chap" returns ok for request 1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
modcall[authorize]: module "mschap" returns noop for request 1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
rlm_realm: Looking up realm "idola" for User-Name = "rsa@idola"</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
rlm_realm: No such realm "idola"</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
modcall[authorize]: module "suffix" returns noop for request 1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;"> rlm_eap:
No EAP-Message, not doing EAP</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
modcall[authorize]: module "eap" returns noop for request 1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;"> users:
Matched entry DEFAULT at line 163</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;"> users:
Matched entry DEFAULT at line 183</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;"> users:
Matched entry DEFAULT at line 195</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
modcall[authorize]: module "files" returns ok for request 1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">radius_xlat: 'rsa@idola'</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rlm_sql
(sql): sql_set_user escaped user --> 'rsa@idola'</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">radius_xlat: 'SELECT id, UserName,
Attribute, Value, op FROM radcheck WHERE Username = 'rsa@idola'
ORDER BY id'</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rlm_sql
(sql): Reserving sql socket id: 2</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">radius_xlat: 'SELECT <a title="blocked::http://radgroupcheck.id/" href="http://radgroupcheck.id/">radgroupcheck.id</a>,radgroupcheck.GroupName,
radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op
FROM radgroupcheck,usergroup WHERE usergroup.Username = 'rsa@idola' AND
usergroup.GroupName = radgroupcheck.GroupName ORDER BY <a title="blocked::http://radgroupcheck.id/" href="http://radgroupcheck.id/">radgroupcheck.id</a>'</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">radius_xlat: 'SELECT id, UserName,
Attribute, Value, op FROM radreply WHERE Username = 'rsa@idola' ORDER BY
id'</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">radius_xlat: 'SELECT <a title="blocked::http://radgroupreply.id/" href="http://radgroupreply.id/">radgroupreply.id</a>,radgroupreply.GroupName,
radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op
FROM radgroupreply,usergroup WHERE usergroup.Username = 'rsa@idola' AND
usergroup.GroupName = radgroupreply.GroupName ORDER BY <a title="blocked::http://radgroupreply.id/" href="http://radgroupreply.id/">radgroupreply.id</a>'</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rlm_sql
(sql): Released sql socket id: 2</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
modcall[authorize]: module "sql" returns ok for request 1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rlm_pap:
Found existing Auth-Type, not changing it.</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
modcall[authorize]: module "pap" returns noop for request 1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rlm_sqlcounter: Entering module
authorize code</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rlm_sqlcounter: Could not find Check
item value pair</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
modcall[authorize]: module "noresetcounter" returns noop for request
1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rlm_sqlcounter: Entering module
authorize code</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rlm_sqlcounter: Could not find Check
item value pair</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
modcall[authorize]: module "dailycounter" returns noop for request 1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rlm_sqlcounter: Entering module
authorize code</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rlm_sqlcounter: Could not find Check
item value pair</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
modcall[authorize]: module "monthlycounter" returns noop for request
1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rlm_sqlcounter: Entering module
authorize code</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rlm_sqlcounter: Could not find Check
item value pair</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
modcall[authorize]: module "mbcounter" returns noop for request 1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rlm_sqlcounter: Entering module
authorize code</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rlm_sqlcounter: Could not find Check
item value pair</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
modcall[authorize]: module "dailymbcounter" returns noop for request
1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rlm_sqlcounter: Entering module
authorize code</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rlm_sqlcounter: Could not find Check
item value pair</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
modcall[authorize]: module "monthlymbcounter" returns noop for request
1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">modcall:
leaving group authorize (returns ok) for request 1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
rad_check_password: Found Auth-Type Local</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">auth: type
Local</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">auth: user
supplied CHAP-Password matches local User-Password</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
Processing the session section of radiusd.conf</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">modcall:
entering group session for request 1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">radius_xlat:
'/usr/local/var/log/radius/radutmp'</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">radius_xlat: 'rsa@idola'</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
modcall[session]: module "radutmp" returns ok for request 1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">modcall:
leaving group session (returns ok) for request 1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;"> Found
Post-Auth-Type</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
Processing the post-auth section of radiusd.conf</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">modcall:
entering group REJECT for request 1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rlm_sql
(sql): Processing sql_postauth</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">radius_xlat: 'rsa@idola'</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rlm_sql
(sql): sql_set_user escaped user --> 'rsa@idola'</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">radius_xlat: 'INSERT into
radpostauth (id, user, pass, reply, date) values ('','rsa@idola',
'Chap-Password', 'Access-Reject', NOW())'</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rlm_sql
(sql) in sql_postauth: query is INSERT into radpostauth (id, user, pass,reply,
date) values ('', 'rsa@idola', 'Chap-Password', 'Access-Reject',
NOW())</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rlm_sql
(sql): Reserving sql socket id: 1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rlm_sql
(sql): Released sql socket id: 1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">
modcall[post-auth]: module "sql" returns ok for request 1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">modcall:
leaving group REJECT (returns ok) for request 1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">Delaying
request 1 for 1 seconds</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">Finished
request 1</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">Going to
the next request</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">--- Walking
the entire request list ---</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">Waking up
in 1 seconds...</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">rad_recv:
Access-Request packet from host <a title="blocked::http://129.47.26.123:1088/" href="http://129.47.26.123:1088/">129.47.26.123:1088</a>, id=8,
length=179</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">Sending
Access-Reject of id 8 to <a title="blocked::http://129.47.26.123/" href="http://129.47.26.123/">129.47.26.123</a> port 1088</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">Reply-Message := "\r\nYou are
already logged in - access denied\r\n\n"</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">Waking up
in 1 seconds...</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;"> </span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">I have
already checked my NAS and there is no session for rsa@idola, I try with radzap
and still not working…</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">Any help
please…</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;"> </span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">thanks</span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: Arial;">trio</span></p>